Authorization was built for sessions, not intent.
OAuth scopes tell a system which API an agent may call. They say nothing about a $4,000 ceiling, an approved vendor list, or whether this purchase still falls inside what the user actually asked for.
AUTHORITY AND SETTLEMENT FOR AUTONOMOUS AGENTS
Grantline issues scoped, signed mandates that define exactly what an agent may do — and enforces them at the moment money moves. Any counterparty can verify one in 40 milliseconds.
mandate presented
signature valid · within limits
accepted
captured $412.00
median mandate verification
constraint types per mandate
of actions written to an append-only ledger
agent credentials stored on your servers
THE MISSING CONTROL PLANE
OAuth scopes tell a system which API an agent may call. They say nothing about a $4,000 ceiling, an approved vendor list, or whether this purchase still falls inside what the user actually asked for.
A merchant receiving an agent-initiated order has no standard way to confirm the agent represents the account holder, or that the order sits within granted authority. Most respond by blocking agents entirely.
When an agent buys the wrong thing, the evidence is a model transcript. That is not an artifact anyone can settle a dispute against.
HOW IT WORKS
The principal — a user or an organization — grants scoped authority to a specific agent. Constraints cover amount, merchant, category, geography, time window, velocity, approval thresholds, and single-use versus recurring.
The agent attaches the mandate to its request. The signature travels with the action; nothing sensitive is copied into your infrastructure.
The counterparty calls verify. Grantline checks the signature, the revocation state, and every constraint against the live request, then returns an allow or deny with a reason.
Funds move against the mandate through hold, capture, or escrow for delivery-conditional purchases. Every step lands in an append-only ledger with a hash chain.
CAPABILITIES
Nine constraint types, composable, expressed as data rather than prose.
Kill an agent's authority globally in one call. Propagates in under a second.
Per-transaction, per-merchant, per-period, and velocity ceilings, enforced at authorization rather than reconciled after the fact.
Hold funds until delivery, completion, or a signed receipt, for agent-to-agent and agent-to-merchant transactions.
Every issuance, presentation, decision, and settlement hash-chained and exportable for audit.
Anything above a threshold pauses and routes to the principal, with the full request context attached.
SPEAKS THE RAILS YOUR COUNTERPARTIES ALREADY USE
Emerging agent-payment standards are converging. Grantline is designed to issue and verify across them rather than compete with them.
IF YOU BUILD AGENTS
Give users a dial they understand — how much, where, for how long — and a revoke button that actually works.
IF YOU ACCEPT AGENTS
Stop treating agent traffic as fraud, and keep a record that survives a chargeback.
PRICING
DEVELOPER
SCALE
PLATFORM
Verification is always free for the counterparty. The side asking for authority pays for it.
FAQ
A CONTROL PLANE FOR AUTONOMY
Give agents room to act and a boundary they cannot cross.
Get started